@incodetech/core 2.1.1-rc.6 → 2.1.1-rc.8

package/dist/{BrowserStorageProvider-fZsibQTR.esm.js → BrowserStorageProvider-CBHBhKQN.esm.js}

@@ -1,18 +1,26 @@
+import { n as resolveLocalStorage } from "./MotionSensorProvider-BHuHoYvJ.esm.js";
+
 //#region ../infra/src/providers/browser/BrowserStorageProvider.ts
 /**
 * Browser-based storage provider wrapping localStorage.
 * Handles JSON serialization/deserialization automatically.
+*
+* Degrades silently when the host makes localStorage unreachable: reads return
+* `null` and writes are no-ops. Deliberately quiet — hosts that harden against
+* self-XSS by deleting the global would otherwise see a warning on every call.
 */
 var BrowserStorageProvider = class {
 	/**
 	* Retrieves a value from localStorage.
 	* @param key - The storage key
-	* @returns The stored value or null if not found
+	* @returns The stored value, or null if not found or storage is unavailable
 	* @throws Error if stored value is invalid JSON
 	*/
 	async get(key) {
+		const storage = resolveLocalStorage();
+		if (!storage) return null;
 		try {
-			const item = localStorage.getItem(key);
+			const item = storage.getItem(key);
 			if (item === null) return null;
 			return JSON.parse(item);
 		} catch (error) {
@@ -21,15 +29,17 @@ var BrowserStorageProvider = class {
 		}
 	}
 	/**
-	* Stores a value in localStorage.
+	* Stores a value in localStorage. No-op when storage is unavailable.
 	* @param key - The storage key
 	* @param value - The value to store (will be serialized as JSON)
 	* @throws Error if value cannot be serialized or quota is exceeded
 	*/
 	async set(key, value) {
+		const storage = resolveLocalStorage();
+		if (!storage) return;
 		try {
 			const serialized = JSON.stringify(value);
-			localStorage.setItem(key, serialized);
+			storage.setItem(key, serialized);
 		} catch (error) {
 			if ((error instanceof DOMException || error.name === "QuotaExceededError") && error.name === "QuotaExceededError") throw new Error(`Storage quota exceeded for key "${key}"`);
 			if (error instanceof TypeError) throw new Error(`Failed to serialize value for key "${key}": ${error.message}`);
@@ -37,17 +47,21 @@ var BrowserStorageProvider = class {
 		}
 	}
 	/**
-	* Removes a value from localStorage.
+	* Removes a value from localStorage. No-op when storage is unavailable.
 	* @param key - The storage key to remove
 	*/
 	async remove(key) {
-		localStorage.removeItem(key);
+		const storage = resolveLocalStorage();
+		if (!storage) return;
+		storage.removeItem(key);
 	}
 	/**
-	* Clears all values from localStorage.
+	* Clears all values from localStorage. No-op when storage is unavailable.
 	*/
 	async clear() {
-		localStorage.clear();
+		const storage = resolveLocalStorage();
+		if (!storage) return;
+		storage.clear();
 	}
 };
 

package/dist/{MotionSensorProvider-D95kOKVK.esm.js → MotionSensorProvider-BHuHoYvJ.esm.js}

@@ -1,3 +1,38 @@
+//#region ../infra/src/storage/safeStorage.ts
+/**
+* Storage resolvers that tolerate hosts which make Web Storage unreachable.
+*
+* Two hostile shapes occur in the field, and they fail differently:
+*
+* 1. **Deleted bare global** — a page mitigates self-XSS with
+*    `delete window.localStorage` and keeps a module-private reference. Since
+*    `window` *is* the global object, the identifier stops resolving: a bare
+*    read throws `ReferenceError`. `typeof` is the only safe probe, because it
+*    is the one operator that tolerates an unresolvable identifier.
+* 2. **Blocked storage** — a webview or a cross-origin/partitioned context
+*    makes the accessor itself throw (`SecurityError`). Here `typeof` is *not*
+*    enough: it invokes the getter, so the throw escapes the guard.
+*
+* Handling only one shape leaves the other live, so always go through these
+* resolvers instead of touching the globals directly. A `null` return means
+* "no storage in this host" — callers degrade, they do not throw.
+*/
+function resolveLocalStorage() {
+	try {
+		return typeof localStorage === "undefined" ? null : localStorage;
+	} catch {
+		return null;
+	}
+}
+function resolveSessionStorage() {
+	try {
+		return typeof sessionStorage === "undefined" ? null : sessionStorage;
+	} catch {
+		return null;
+	}
+}
+
+//#endregion
 //#region ../infra/src/providers/browser/MotionSensorProvider.ts
 const MOTION_PERMISSION_GRANTED_KEY = "motionSensorsPermissionsGranted";
 const MOTION_PERMISSION_DENIED_KEY = "motionSensorsPermissionsDenied";
@@ -6,8 +41,9 @@ var MotionSensorProvider = class MotionSensorProvider {
 		return typeof DeviceMotionEvent !== "undefined" && typeof DeviceMotionEvent.requestPermission === "function";
 	}
 	static readSessionFlag(key) {
-		if (typeof sessionStorage === "undefined") return false;
-		return sessionStorage.getItem(key) === "true";
+		const storage = resolveSessionStorage();
+		if (!storage) return false;
+		return storage.getItem(key) === "true";
 	}
 	static hasMotionPermissionGrantedInSession() {
 		return MotionSensorProvider.readSessionFlag(MOTION_PERMISSION_GRANTED_KEY);
@@ -114,15 +150,17 @@ var MotionSensorProvider = class MotionSensorProvider {
 		return MotionSensorProvider.hasMotionPermissionDeniedInSession();
 	}
 	markMotionPermissionGrantedInSession() {
-		if (typeof sessionStorage === "undefined") return;
-		sessionStorage.setItem(MOTION_PERMISSION_GRANTED_KEY, String(true));
-		sessionStorage.removeItem(MOTION_PERMISSION_DENIED_KEY);
-		sessionStorage.setItem("motionSensorsPermissionsRequested", String(true));
+		const storage = resolveSessionStorage();
+		if (!storage) return;
+		storage.setItem(MOTION_PERMISSION_GRANTED_KEY, String(true));
+		storage.removeItem(MOTION_PERMISSION_DENIED_KEY);
+		storage.setItem("motionSensorsPermissionsRequested", String(true));
 	}
 	markMotionPermissionDeniedInSession() {
-		if (typeof sessionStorage === "undefined") return;
-		sessionStorage.setItem(MOTION_PERMISSION_DENIED_KEY, String(true));
-		sessionStorage.removeItem(MOTION_PERMISSION_GRANTED_KEY);
+		const storage = resolveSessionStorage();
+		if (!storage) return;
+		storage.setItem(MOTION_PERMISSION_DENIED_KEY, String(true));
+		storage.removeItem(MOTION_PERMISSION_GRANTED_KEY);
 	}
 	syncSessionPermission() {
 		if (!MotionSensorProvider.isIosMotionPermissionRequired()) {
@@ -301,4 +339,4 @@ var MotionSensorProvider = class MotionSensorProvider {
 };
 
 //#endregion
-export { MotionSensorProvider as t };
+export { resolveLocalStorage as n, resolveSessionStorage as r, MotionSensorProvider as t };

package/dist/ae-signature.d.ts

@@ -1,7 +1,7 @@
 import "./StateMachine-D5WO6lHS.js";
 import { t as Manager } from "./Manager-goNPc_h_.js";
 import "./Actor-BwgmOPkb.js";
-import { a as AE_CONSENT_KEYS, c as ConsentKey, g as getDefaultConsentChecks, i as electronicSignatureMachine, l as ElectronicSignatureConfig, m as areAllConsented, n as ElectronicSignatureState, s as ConsentChecks, u as ElectronicSignatureDocument } from "./index-CPLWHXKr.js";
+import { a as AE_CONSENT_KEYS, c as ConsentKey, g as getDefaultConsentChecks, i as electronicSignatureMachine, l as ElectronicSignatureConfig, m as areAllConsented, n as ElectronicSignatureState, s as ConsentChecks, u as ElectronicSignatureDocument } from "./index-DCDTLkNA.js";
 
 //#region src/modules/ae-signature/index.d.ts
 

package/dist/authentication.esm.js

@@ -3,33 +3,33 @@ import "./api-DsbUi7TO.esm.js";
 import "./events-1wxZ97yf.esm.js";
 import "./endpoints-CwrFQfW7.esm.js";
 import "./stats-BVy52wLy.esm.js";
-import "./browserSimulation-CWJhFPZ2.esm.js";
+import "./browserSimulation-DZwEy9bu.esm.js";
 import "./platform-0Ot-bF_a.esm.js";
 import "./getBrowser-1yNcfFZR.esm.js";
 import "./xstate.esm-nY3M5UYm.esm.js";
-import "./faceCaptureSetup-CoQ5A9Il.esm.js";
+import "./faceCaptureSetup-DIcdpyTZ.esm.js";
 import "./wasmDsFlagSync-Ch0mFJNT.esm.js";
 import "./BrowserVisibilityObserverProvider-GBS6XSii.esm.js";
-import "./MotionSensorProvider-D95kOKVK.esm.js";
-import "./permissionServices-BElIOcoJ.esm.js";
+import "./MotionSensorProvider-BHuHoYvJ.esm.js";
+import "./permissionServices-C_kxhNeo.esm.js";
 import "./camera-CxxXV0VN.esm.js";
-import "./faceCaptureManagerFactory-B65bYWfD.esm.js";
-import "./BrowserStorageProvider-fZsibQTR.esm.js";
-import "./onDeviceFaceResults-CAfvpjnC.esm.js";
+import "./faceCaptureManagerFactory-D4ogJ_0w.esm.js";
+import "./BrowserStorageProvider-CBHBhKQN.esm.js";
+import "./onDeviceFaceResults-B-NkCXud.esm.js";
 import "./ITimerCapability-DJ73P4RK.esm.js";
 import "./canvas-Pi10hG_l.esm.js";
 import "./backCameraStream-ChrMTJv-.esm.js";
 import "./video-ZY92rkel.esm.js";
 import "./getDeviceClass-C-Dg6IsJ.esm.js";
-import "./deepsightService-CkZqM1Q2.esm.js";
+import "./deepsightService-CViys6T4.esm.js";
 import "./getDeviceClass-DIjnTPjR.esm.js";
 import "./types-BKLb3C42.esm.js";
 import "./createFaceAvatar-BZSg2MNo.esm.js";
 import "./StreamCanvasCapture-CAqUdVkM.esm.js";
-import "./permissionGuards-BPZGWaL4.esm.js";
-import "./recordingService-Df_A6oXO.esm.js";
+import "./permissionGuards-BNOe4Tnu.esm.js";
+import "./recordingService-CDECCnNi.esm.js";
 import "./mediaRecorderOptions-CClCKAiF.esm.js";
-import { t as authenticationMachine } from "./authenticationStateMachine-CDG0SMYg.esm.js";
-import { r as createAuthenticationActor, t as createAuthenticationManager } from "./authenticationManager-DuMSpelF.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-B_vlpQuJ.esm.js";
+import { r as createAuthenticationActor, t as createAuthenticationManager } from "./authenticationManager-CaaiBwSC.esm.js";
 
 export { authenticationMachine, createAuthenticationActor, createAuthenticationManager };

package/dist/{authenticationManager-DuMSpelF.esm.js → authenticationManager-CaaiBwSC.esm.js}

@@ -1,9 +1,9 @@
 import { t as WasmUtilProvider } from "./WasmUtilProvider-BgzcXBdl.esm.js";
 import { n as eventModuleNames } from "./events-1wxZ97yf.esm.js";
 import { s as createActor } from "./xstate.esm-nY3M5UYm.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-B65bYWfD.esm.js";
-import { t as BrowserStorageProvider } from "./BrowserStorageProvider-fZsibQTR.esm.js";
-import { t as authenticationMachine } from "./authenticationStateMachine-CDG0SMYg.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-D4ogJ_0w.esm.js";
+import { t as BrowserStorageProvider } from "./BrowserStorageProvider-CBHBhKQN.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-B_vlpQuJ.esm.js";
 
 //#region src/modules/authentication/authenticationActor.ts
 function createAuthenticationActor(options) {

package/dist/{authenticationStateMachine-CDG0SMYg.esm.js → authenticationStateMachine-B_vlpQuJ.esm.js}

@@ -2,8 +2,8 @@ import { t as api } from "./api-DsbUi7TO.esm.js";
 import { t as endpoints } from "./endpoints-CwrFQfW7.esm.js";
 import { t as addDeviceStats } from "./stats-BVy52wLy.esm.js";
 import { a as fromPromise, r as assign } from "./xstate.esm-nY3M5UYm.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-CoQ5A9Il.esm.js";
-import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-CAfvpjnC.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-DIcdpyTZ.esm.js";
+import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-B-NkCXud.esm.js";
 import { t as getDeviceClass } from "./getDeviceClass-DIjnTPjR.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BKLb3C42.esm.js";
 

package/dist/{browserSimulation-CWJhFPZ2.esm.js → browserSimulation-DZwEy9bu.esm.js}

@@ -2724,8 +2724,21 @@ var se = class {
 * Adapter for @thumbmarkjs/thumbmarkjs. Single point of dependency so bundlers
 * resolve it from infra's node_modules when building apps that depend on core → infra.
 */
+/**
+* `logging` must stay disabled. With it on (the upstream default) `getThumbmark()`
+* evaluates a bare, unguarded storage read:
+*
+*   options.logging && !sessionStorage.getItem("_tmjs_l") && Math.random() < 1e-4
+*
+* Hosts that delete the bare global as a self-XSS mitigation (`delete
+* window.sessionStorage`) make that a `ReferenceError`, which would cost us the
+* device fingerprint. `logging: false` short-circuits the expression before the
+* read. It also stops upstream's 1-in-10 000 telemetry POST to
+* api.thumbmarkjs.com. Re-check this when bumping the dependency.
+*/
+const THUMBMARK_OPTIONS = { logging: false };
 async function getThumbmarkId() {
-	return (await new se().get()).thumbmark;
+	return (await new se(THUMBMARK_OPTIONS).get()).thumbmark;
 }
 
 //#endregion

package/dist/camera.esm.js

@@ -1,6 +1,6 @@
 import "./WasmUtilProvider-BgzcXBdl.esm.js";
-import "./MotionSensorProvider-D95kOKVK.esm.js";
-import { i as requestPermission, t as checkPermission } from "./permissionServices-BElIOcoJ.esm.js";
+import "./MotionSensorProvider-BHuHoYvJ.esm.js";
+import { i as requestPermission, t as checkPermission } from "./permissionServices-C_kxhNeo.esm.js";
 import "./camera-CxxXV0VN.esm.js";
 
 export { checkPermission as checkCameraPermission, requestPermission as requestCameraPermission };

package/dist/certificate-issuance.d.ts

@@ -1,7 +1,7 @@
 import "./StateMachine-D5WO6lHS.js";
 import { t as Manager } from "./Manager-goNPc_h_.js";
 import "./Actor-BwgmOPkb.js";
-import * as xstate1095 from "xstate";
+import * as xstate843 from "xstate";
 
 //#region src/modules/certificate-issuance/certificateIssuanceConstants.d.ts
 declare const MIN_PASSWORD_LENGTH = 8;
@@ -40,7 +40,7 @@ type CertificateIssuanceContext = {
 type CertificateIssuanceInput = {
   config: CertificateIssuanceConfig;
 };
-declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIssuanceContext, {
+declare const certificateIssuanceMachine: xstate843.StateMachine<CertificateIssuanceContext, {
   type: "LOAD";
 } | {
   type: "PASSWORD_CHANGED";
@@ -54,28 +54,28 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
 } | {
   type: "FINISH";
 }, {
-  [x: string]: xstate1095.ActorRefFromLogic<xstate1095.PromiseActorLogic<IssueCertificateResponse, {
+  [x: string]: xstate843.ActorRefFromLogic<xstate843.PromiseActorLogic<IssueCertificateResponse, {
     password: string;
-  }, xstate1095.EventObject>> | undefined;
+  }, xstate843.EventObject>> | undefined;
 }, {
   src: "issueCertificate";
-  logic: xstate1095.PromiseActorLogic<IssueCertificateResponse, {
+  logic: xstate843.PromiseActorLogic<IssueCertificateResponse, {
     password: string;
-  }, xstate1095.EventObject>;
+  }, xstate843.EventObject>;
   id: string | undefined;
-}, xstate1095.Values<{
+}, xstate843.Values<{
   setPassword: {
     type: "setPassword";
-    params: xstate1095.NonReducibleUnknown;
+    params: xstate843.NonReducibleUnknown;
   };
   setBlob: {
     type: "setBlob";
-    params: xstate1095.NonReducibleUnknown;
+    params: xstate843.NonReducibleUnknown;
   };
 }>, {
   type: "isPasswordValid";
   params: unknown;
-}, never, "error" | "idle" | "processing" | "success" | "finished" | "password" | "downloaded", string, CertificateIssuanceInput, xstate1095.NonReducibleUnknown, xstate1095.EventObject, xstate1095.MetaObject, {
+}, never, "error" | "idle" | "processing" | "success" | "finished" | "password" | "downloaded", string, CertificateIssuanceInput, xstate843.NonReducibleUnknown, xstate843.EventObject, xstate843.MetaObject, {
   readonly id: "certificateIssuance";
   readonly initial: "idle";
   readonly context: ({
@@ -84,39 +84,39 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
     spawn: {
       <TSrc extends "issueCertificate">(logic: TSrc, ...[options]: {
         src: "issueCertificate";
-        logic: xstate1095.PromiseActorLogic<IssueCertificateResponse, {
+        logic: xstate843.PromiseActorLogic<IssueCertificateResponse, {
           password: string;
-        }, xstate1095.EventObject>;
+        }, xstate843.EventObject>;
         id: string | undefined;
       } extends infer T ? T extends {
         src: "issueCertificate";
-        logic: xstate1095.PromiseActorLogic<IssueCertificateResponse, {
+        logic: xstate843.PromiseActorLogic<IssueCertificateResponse, {
           password: string;
-        }, xstate1095.EventObject>;
+        }, xstate843.EventObject>;
         id: string | undefined;
       } ? T extends {
         src: TSrc;
-      } ? xstate1095.ConditionalRequired<[options?: ({
+      } ? xstate843.ConditionalRequired<[options?: ({
         id?: T["id"] | undefined;
         systemId?: string;
-        input?: xstate1095.InputFrom<T["logic"]> | undefined;
+        input?: xstate843.InputFrom<T["logic"]> | undefined;
         syncSnapshot?: boolean;
-      } & { [K in xstate1095.RequiredActorOptions<T>]: unknown }) | undefined], xstate1095.IsNotNever<xstate1095.RequiredActorOptions<T>>> : never : never : never): xstate1095.ActorRefFromLogic<xstate1095.GetConcreteByKey<{
+      } & { [K in xstate843.RequiredActorOptions<T>]: unknown }) | undefined], xstate843.IsNotNever<xstate843.RequiredActorOptions<T>>> : never : never : never): xstate843.ActorRefFromLogic<xstate843.GetConcreteByKey<{
         src: "issueCertificate";
-        logic: xstate1095.PromiseActorLogic<IssueCertificateResponse, {
+        logic: xstate843.PromiseActorLogic<IssueCertificateResponse, {
           password: string;
-        }, xstate1095.EventObject>;
+        }, xstate843.EventObject>;
         id: string | undefined;
       }, "src", TSrc>["logic"]>;
-      <TLogic extends xstate1095.AnyActorLogic>(src: TLogic, ...[options]: xstate1095.ConditionalRequired<[options?: ({
+      <TLogic extends xstate843.AnyActorLogic>(src: TLogic, ...[options]: xstate843.ConditionalRequired<[options?: ({
         id?: never;
         systemId?: string;
-        input?: xstate1095.InputFrom<TLogic> | undefined;
+        input?: xstate843.InputFrom<TLogic> | undefined;
         syncSnapshot?: boolean;
-      } & { [K in xstate1095.RequiredLogicInput<TLogic>]: unknown }) | undefined], xstate1095.IsNotNever<xstate1095.RequiredLogicInput<TLogic>>>): xstate1095.ActorRefFromLogic<TLogic>;
+      } & { [K in xstate843.RequiredLogicInput<TLogic>]: unknown }) | undefined], xstate843.IsNotNever<xstate843.RequiredLogicInput<TLogic>>>): xstate843.ActorRefFromLogic<TLogic>;
     };
     input: CertificateIssuanceInput;
-    self: xstate1095.ActorRef<xstate1095.MachineSnapshot<CertificateIssuanceContext, {
+    self: xstate843.ActorRef<xstate843.MachineSnapshot<CertificateIssuanceContext, {
       type: "LOAD";
     } | {
       type: "PASSWORD_CHANGED";
@@ -129,7 +129,7 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
       type: "DOWNLOAD_FAILED";
     } | {
       type: "FINISH";
-    }, Record<string, xstate1095.AnyActorRef | undefined>, xstate1095.StateValue, string, unknown, any, any>, {
+    }, Record<string, xstate843.AnyActorRef | undefined>, xstate843.StateValue, string, unknown, any, any>, {
       type: "LOAD";
     } | {
       type: "PASSWORD_CHANGED";
@@ -142,7 +142,7 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
       type: "DOWNLOAD_FAILED";
     } | {
       type: "FINISH";
-    }, xstate1095.AnyEventObject>;
+    }, xstate843.AnyEventObject>;
   }) => {
     config: CertificateIssuanceConfig;
     password: string;
@@ -190,7 +190,7 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
           } | {
             type: "FINISH";
           };
-          self: xstate1095.ActorRef<xstate1095.MachineSnapshot<CertificateIssuanceContext, {
+          self: xstate843.ActorRef<xstate843.MachineSnapshot<CertificateIssuanceContext, {
             type: "LOAD";
           } | {
             type: "PASSWORD_CHANGED";
@@ -203,7 +203,7 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
             type: "DOWNLOAD_FAILED";
           } | {
             type: "FINISH";
-          }, Record<string, xstate1095.AnyActorRef>, xstate1095.StateValue, string, unknown, any, any>, {
+          }, Record<string, xstate843.AnyActorRef>, xstate843.StateValue, string, unknown, any, any>, {
             type: "LOAD";
           } | {
             type: "PASSWORD_CHANGED";
@@ -216,7 +216,7 @@ declare const certificateIssuanceMachine: xstate1095.StateMachine<CertificateIss
             type: "DOWNLOAD_FAILED";
           } | {
             type: "FINISH";
-          }, xstate1095.AnyEventObject>;
+          }, xstate843.AnyEventObject>;
         }) => {
           password: string;
         };

package/dist/consent.d.ts

@@ -1,5 +1,5 @@
 import "./StateMachine-D5WO6lHS.js";
 import "./Manager-goNPc_h_.js";
 import "./Actor-BwgmOPkb.js";
-import { a as ConsentActor, c as ConsentConfig, i as createConsentManagerFromActor, n as ConsentState, o as consentMachine, r as createConsentManager, s as ConsentCheckbox, t as ConsentManager } from "./consentManager-2EPNWwaG.js";
+import { a as ConsentActor, c as ConsentConfig, i as createConsentManagerFromActor, n as ConsentState, o as consentMachine, r as createConsentManager, s as ConsentCheckbox, t as ConsentManager } from "./consentManager-CuA2nywX.js";
 export { type ConsentActor, type ConsentCheckbox, type ConsentConfig, type ConsentManager, type ConsentState, consentMachine, createConsentManager, createConsentManagerFromActor };